Summary
Successful exploitation of these vulnerabilities could lead to information disclosure, modification, or deletion.
Vulnerabilities 2
-
Medium 6.5
OSIsoft PI Vision
A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impac…
-
Low 3.1
OSIsoft PI Vision
PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.
Revision history
-
#1
ICSA-21-313-05 OSIsoft PI Vision
References
-
ICS Advisory ICSA-21-313-05 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-313-05
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B
-
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014